Re: [Openstack] A possible alternative to Gerrit ...

2011-09-06 Thread Jay Payne
Monty, Is there a published list of work flow requirements for an/the OpenStack project? Not really based on any specific implementation or tool. These is the closest thing I could find. For bzr there are http://wiki.openstack.org/BzrPerfectWorkflow & http://wiki.openstack.org/LifeWithBzrAnd

Re: [Openstack] Openstack in China kick-off conference, Tuesday 6th of September 2011

2011-09-06 Thread Thomas Goirand
Hi, The conference of yesterday was, according to both attendees, other speakers and organizers, quite successful. There was around 400 attendees, and the conference room was full, which was better than we expected. Some attendees even traveled form far away in China just to attend the conference

Re: [Openstack] A possible alternative to Gerrit ...

2011-09-06 Thread Monty Taylor
Hi everybody! I understand some of you are not comfortable with Gerrit and the workflow I and others are working to implement. While this may be a problem for some, it was never our intention to make life hard for anybody here. Let me try to explain why and how we got to this decision and make a p

Re: [Openstack] API documentation move

2011-09-06 Thread Jay Pipes
On Tue, Sep 6, 2011 at 2:02 PM, Anne Gentle wrote: > Hi all - > > I wanted to discuss some changes to the API documentation for each project > prior to implementation to make sure I'm not missing any crucial detail and > to ensure you all feel you have ownership of the solution and input into it.

Re: [Openstack] Authentication and Authorisation in Keystone

2011-09-06 Thread Dolph Mathews
Based on this discussion, I think keystone needs to clearly document that it provides authentication services only. The *only* authorization keystone performs is for keystone admins performing keystone admin calls (creating a new role in keystone, for example). Keystone consumers are currently l

Re: [Openstack] Authentication and Authorisation in Keystone

2011-09-06 Thread Brian Lamar
Authentication is the act of acquiring a valid "token" from Keystone. That token can be used to prove that you have recently been authenticated. I see one point where you call this token an "authorization token". This might be one of the issues because I would most certainly refer to that token

Re: [Openstack] Authentication and Authorisation in Keystone

2011-09-06 Thread Joe Savak
Hi Nathan, Role is mentioned in the admin guide (https://github.com/openstack/keystone/blob/master/keystone/content/admin/identityadminguide.pdf). When a service attempts to validate a token, a list of roles that a user has for a tenant (or multiple tenants) is returned. It is up to the

[Openstack] Questions on nova code: networking & live/offline migration

2011-09-06 Thread Alex Lyakas
Greetings everybody, I have been reading the nova code (pretty close to the latest version) and I have a couple of questions regarding it. Live migration: I see that VIR_MIGRATE_NON_SHARED_INC flag is used, meaning that at destination, the same backing file should be available. (Indeed, the imag

[Openstack] Authentication and Authorisation in Keystone

2011-09-06 Thread Nathan Sowatskey
http://forums.openstack.org/viewtopic.php?f=23&t=268&p=955#p955 Hi I am trying to understand the role that authorisation plays in Keystone, as I don't see any mention of it in the identitydevguide.pdf. In other identity systems such as SAML or OAuth, authentication is used to obtain a token th

[Openstack] Keystone, SAML, OAuth and OpenID

2011-09-06 Thread Nathan Sowatskey
http://forums.openstack.org/viewtopic.php?f=23&t=265&sid=1c5c6e0208bebeb58a9551e54eff1069 Hi I would like to discuss the relationship, proposed or actual, between Keystone, SAML, OAuth and OpenID please. Does anyone have any thoughts or ideas to contribute please? Many thanks Nathan -- Natha

[Openstack] API documentation move

2011-09-06 Thread Anne Gentle
Hi all - I wanted to discuss some changes to the API documentation for each project prior to implementation to make sure I'm not missing any crucial detail and to ensure you all feel you have ownership of the solution and input into it. My goal is to move all the OpenStack documentation into githu

[Openstack] Openstack swift code now on github

2011-09-06 Thread John Dickinson
The official Openstack swift codebase has been moved to github. You can find it at http://github.com/openstack/swift. Also, at the request of the Openstack PPB, swift is now using gerrit to manage code reviews. Gerrit is designed to provide some of the code review features we were using in Launchp

Re: [Openstack] Keystone and SCIM - Simple Cloud Identity Management

2011-09-06 Thread Joe Savak
I haven't heard of this before, but it sounds interesting. Possibly capable of providing the core (non-extension) CRUD operations for user management in Essex. On that note, I updated the keystone wiki (http://wiki.openstack.org/keystone ) with links to potential blueprints for Essex. I'll incl

Re: [Openstack] Installation errors

2011-09-06 Thread Leandro Reox
Sounds like a metadata getting issue , whats the output of euca-get-console-output $instance ? On Tue, Sep 6, 2011 at 4:33 AM, bhaskar kotha wrote: > hi, > > I can see my instances running but i'm not able to ssh/ping. > output for *euca-describe-instances* is : > > > RESERVATION r-mthjd2q5

[Openstack] Reminder: OpenStack team meeting - 21:00 UTC

2011-09-06 Thread Thierry Carrez
Hello everyone, Our team meeting will take place at 21:00 UTC this Tuesday in #openstack-meeting on IRC. PTLs, if you can't make it, please name a substitute on [2]. This is the last meeting before we release Swift 1.4.3, and before we create the final release branch for Nova and Glance (and open

[Openstack] Keystone and SCIM - Simple Cloud Identity Management

2011-09-06 Thread Nathan Sowatskey
http://forums.openstack.org/viewtopic.php?f=23&t=266 Hi Is anyone working on Keystone aware of the Simple Cloud Identity Management (SCIM) project? See: http://www.simplecloud.info/ SCIM addresses user provisioning for cloud services. That might overlap with Keystone, or there may be another

Re: [Openstack] Installation errors

2011-09-06 Thread bhaskar kotha
hi, I can see my instances running but i'm not able to ssh/ping. output for *euca-describe-instances* is : RESERVATION r-mthjd2q5 admin default INSTANCEi-0001 ami-0003running test (admin, nova-dx2480-MT)0 m1.tiny 2011-09-06T04: